using credentials instead of settings.js